OTW

Privacy Policy

Last updated: 22 August 2026 — Draft; requires legal review before publication.

Data controller: [COMPANY NAME], [ADDRESS], [EMAIL].

1. What We Collect

When you claim an entry: display name, link (URL), description, the logo address fetched from your link, email address, bid amount, the timestamp of the consent checkbox and your IP address. Your card details never reach us; payment is processed by Stripe.

When you visit: server logs (IP, browser, time of request). When you click a holder's link, we derive an irreversible hash from your IP and browser to count the visit once per day; the raw IP is not stored.

Cookies: only a language preference and a theme preference are stored. There are no advertising or tracking cookies.

2. Why We Process It

To create and publish your promotional listing and count its clicks (performance of contract); to notify you when you are taken over; to keep evidence of the transaction against payment disputes (legitimate interest and legal obligation); to prevent abuse.

3. What Is Public

Your display name, link, description, logo, amount paid and the start and end dates of your entry are shown permanently in the public register. This is the nature of the service. Your email and IP address are never shown publicly.

4. Who We Share It With

  • Stripe (payment processing; subject to its own privacy policy)
  • Resend (email delivery)
  • [HOSTING PROVIDER] (servers and database)
  • Map tiles load from OpenStreetMap servers and holder logos load directly from the holder's own site; those servers can see your IP address.

We do not sell your data or share it for advertising.

5. Retention

Register entries are kept indefinitely by the nature of the service. Email and IP data are deleted or anonymised within [PERIOD] after payment-dispute windows expire. Visit hashes are daily and cannot be linked to a person.

6. Your Rights

Under GDPR and applicable local law (including Turkish KVKK) you may access, correct, delete, object to processing of, and port your data. You may ask for your name to be removed from the public register; the entry then shows as "deleted user" while the payment record is retained as legally required. Requests: [EMAIL].

7. Changes

We may update this policy; the current version is published on the Site.